Commit a8f72c8e5094ef9859536f92b58919effa7a95ed

Authored by Perry Werneck
1 parent 671ab9a2

Adding codeql control file.

Showing 1 changed file with 92 additions and 0 deletions   Show diff stats
.github/workflows/codeql-analysis.yml 0 → 100644
... ... @@ -0,0 +1,92 @@
  1 +# For most projects, this workflow file will not need changing; you simply need
  2 +# to commit it to your repository.
  3 +#
  4 +# You may wish to alter this file to override the set of languages analyzed,
  5 +# or to provide custom queries or build logic.
  6 +name: "CodeQL"
  7 +
  8 +on:
  9 + push:
  10 + branches: [master]
  11 + pull_request:
  12 + # The branches below must be a subset of the branches above
  13 + branches: [master]
  14 + schedule:
  15 + - cron: '0 17 * * 0'
  16 +
  17 +jobs:
  18 + analyze:
  19 + name: Analyze
  20 + runs-on: ubuntu-latest
  21 +
  22 + strategy:
  23 + fail-fast: false
  24 + matrix:
  25 + # Override automatic language detection by changing the below list
  26 + # Supported options are ['csharp', 'cpp', 'go', 'java', 'javascript', 'python']
  27 + language: ['cpp']
  28 + # Learn more...
  29 + # https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection
  30 +
  31 + steps:
  32 + - name: Checkout repository
  33 + uses: actions/checkout@v2
  34 + with:
  35 + # We must fetch at least the immediate parents so that if this is
  36 + # a pull request then we can checkout the head.
  37 + fetch-depth: 2
  38 +
  39 + # If this run was triggered by a pull request event, then checkout
  40 + # the head of the pull request instead of the merge commit.
  41 + - run: git checkout HEAD^2
  42 + if: ${{ github.event_name == 'pull_request' }}
  43 +
  44 + # Initializes the CodeQL tools for scanning.
  45 + - name: Initialize CodeQL
  46 + uses: github/codeql-action/init@v1
  47 + with:
  48 + languages: ${{ matrix.language }}
  49 + # If you wish to specify custom queries, you can do so here or in a config file.
  50 + # By default, queries listed here will override any specified in a config file.
  51 + # Prefix the list here with "+" to use these queries and those in the config file.
  52 + # queries: ./path/to/local/query, your-org/your-repo/queries@main
  53 +
  54 + # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
  55 + # If this step fails, then you should remove it and run the build manually (see below)
  56 + #- name: Autobuild
  57 + # uses: github/codeql-action/autobuild@v1
  58 +
  59 + # ℹ️ Command-line programs to run using the OS shell.
  60 + # 📚 https://git.io/JvXDl
  61 +
  62 + # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
  63 + # and modify them (or add more) to build your code if your project
  64 + # uses a compiled language
  65 + - name: Install Dependencies
  66 + run: |
  67 + sudo apt-get install autotools-dev autoconf gettext libssl-dev libcurl4-openssl-dev libgtk-3-dev
  68 + git clone https://github.com/PerryWerneck/lib3270.git ./lib3270
  69 + NOCONFIGURE=1 ./lib3270/autogen.sh
  70 + cd lib3270
  71 + ./configure --prefix=/usr
  72 + make all
  73 + sudo make install
  74 + cd ..
  75 + sudo rm -fr lib3270
  76 + git clone https://github.com/PerryWerneck/libv3270.git ./libv3270
  77 + NOCONFIGURE=1 ./libv3270/autogen.sh
  78 + cd libv3270
  79 + ./configure --prefix=/usr
  80 + make all
  81 + sudo make install
  82 + cd ..
  83 + sudo rm -fr libv3270
  84 +
  85 +
  86 + - name: build
  87 + run: |
  88 + ./autogen.sh
  89 + make Release
  90 +
  91 + - name: Perform CodeQL Analysis
  92 + uses: github/codeql-action/analyze@v1
... ...